PT-2024-7896 · Linux+5 · Linux Kernel+5

Danilo Krummrich · Published 2024-01-31 · Updated 2025-09-18 · CVE-2024-26977

Positive Technologies (AI Summary)

CVSS v3.1

5.5

Medium

Base vector

AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

Name of the Vulnerable Software and Affected Versions Linux kernel (affected versions not specified)

Description The issue is related to a memory leak in the pci iounmap() function. The #ifdef ARCH HAS GENERIC IOPORT MAP guard accidentally also guards iounmap(), resulting in MMIO mappings being leaked. To fix this, the guard needs to be moved so that iounmap() is called for MMIO mappings. This could potentially allow an attacker to cause a denial of service.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Exploit

Memory Leak

Weakness Enumeration

CWE-401

Related Identifiers

AZL-40416

BDU:2024-09400

CVE-2024-26977

SUSE-SU-2024:2008-1

SUSE-SU-2024:2019-1

SUSE-SU-2024:2190-1

SUSE-SU-2025:20008-1

SUSE-SU-2025:20028-1

USN-6816-1

USN-6817-1

USN-6817-2

USN-6817-3

USN-6878-1

USN-6898-1

USN-6898-2

USN-6898-3

USN-6898-4

USN-6917-1

USN-6919-1

USN-6927-1

USN-7019-1

Affected Products

Astra Linux

Linuxmint

Linux Kernel

Red Os

Suse

Ubuntu

References · 3198

• 🔥 https://github.com/CVEProject/cvelistV5/tree/main/cves/2024/26xxx/CVE-2024-26977.json · Exploit
• https://ubuntu.com/security/CVE-2024-40984 · Vendor Advisory
• https://ubuntu.com/security/CVE-2024-41002 · Vendor Advisory
• https://ubuntu.com/security/CVE-2024-41087 · Vendor Advisory
• https://ubuntu.com/security/CVE-2024-35814 · Vendor Advisory
• https://ubuntu.com/security/CVE-2024-27037 · Vendor Advisory
• https://ubuntu.com/security/CVE-2024-26766 · Vendor Advisory
• https://ubuntu.com/security/CVE-2023-52645 · Vendor Advisory
• https://ubuntu.com/security/CVE-2024-36489 · Vendor Advisory
• https://ubuntu.com/security/CVE-2024-26970 · Vendor Advisory
• https://ubuntu.com/security/CVE-2024-27079 · Vendor Advisory
• https://ubuntu.com/security/CVE-2024-38596 · Vendor Advisory
• https://cve.org/CVERecord?id=CVE-2024-26977 · Security Note
• https://ubuntu.com/security/CVE-2024-26803 · Vendor Advisory
• https://ubuntu.com/security/CVE-2023-6270 · Vendor Advisory